From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andy Wingo Subject: Re: Yet another Hydra mirror: hydra-mirror.marusich.info Date: Tue, 08 Mar 2016 10:04:33 +0100 Message-ID: <87oaap49y6.fsf@igalia.com> References: <87a8m9jx0z.fsf@gmail.com> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:48181) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1adDZI-0007Z5-NR for guix-devel@gnu.org; Tue, 08 Mar 2016 04:04:41 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1adDZF-0000J3-G7 for guix-devel@gnu.org; Tue, 08 Mar 2016 04:04:40 -0500 Received: from pb-sasl0.int.icgroup.com ([208.72.237.25]:58358 helo=sasl.smtp.pobox.com) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1adDZF-0000Iz-Bg for guix-devel@gnu.org; Tue, 08 Mar 2016 04:04:37 -0500 In-Reply-To: <87a8m9jx0z.fsf@gmail.com> (Chris Marusich's message of "Mon, 07 Mar 2016 22:37:00 -0800") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Chris Marusich Cc: guix-devel@gnu.org On Tue 08 Mar 2016 07:37, Chris Marusich writes: > I've set up a caching proxy to serve substitutes from Hydra. If you want > to use it, it's available here: > > http://hydra-mirror.marusich.info > > Behind the scenes, this endpoint is set up to distribute hydra.gnu.org's > substitutes via Amazon CloudFront, which is a global content > distribution network with points of presence in the United States, > Europe, Asia, and South America. That means that almost no matter where > you are, if your neighbor uses it to download substitutes, then you'll > be able to download the same cached substitutes quickly from a nearby > location. Neat :) Right now hydra.gnu.org is in this weird situation where people who use it have to trust it, modulo "guix challenge" of course. But really all we have to trust is the mapping from the derivation (like the "foo" package) to a hash of the build results; the actual build result could be transferred from anywhere with no trust issues at all, provided that we verify the hash. (Do I understand the situation correctly?) Anyway it would be very interesting to be able to distribute the build products using more scalable channels without having to trust more people. Andy